117.2.122.30 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Viettel Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Honeypot attack, port: 445, PTR: localhost.	2020-03-16 20:38:48
attackspambots	Unauthorized connection attempt from IP address 117.2.122.30 on Port 445(SMB)	2020-01-17 00:08:54

相同子网IP讨论:

IP	类型	评论内容	时间
117.2.122.18	attackspam	Unauthorized connection attempt detected from IP address 117.2.122.18 to port 23	2020-07-22 17:28:37
117.2.122.13	attack	Unauthorized connection attempt detected from IP address 117.2.122.13 to port 445 [T]	2020-06-24 02:26:08
117.2.122.205	attackspam	Unauthorized connection attempt from IP address 117.2.122.205 on Port 445(SMB)	2019-11-04 04:36:58

类型

评论内容

时间

117.2.122.18

attackspam

Unauthorized connection attempt detected from IP address 117.2.122.18 to port 23

2020-07-22 17:28:37

117.2.122.13

attack

Unauthorized connection attempt detected from IP address 117.2.122.13 to port 445 [T]

2020-06-24 02:26:08

117.2.122.205

attackspam

Unauthorized connection attempt from IP address 117.2.122.205 on Port 445(SMB)

2019-11-04 04:36:58

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.2.122.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30782
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.2.122.30.			IN	A

;; AUTHORITY SECTION:
.			566	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011600 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 17 00:08:50 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

30.122.2.117.in-addr.arpa domain name pointer localhost.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
30.122.2.117.in-addr.arpa	name = localhost.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
156.96.56.102	attack	SpamReport	2019-11-07 15:10:54
185.175.93.100	attack	11/07/2019-07:30:25.800348 185.175.93.100 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-11-07 14:57:56
148.70.222.83	attack	2019-11-07T06:31:00.092780abusebot-5.cloudsearch.cf sshd\[16405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.222.83 user=root	2019-11-07 14:53:42
138.197.33.113	attack	Nov 7 07:26:17 meumeu sshd[9552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.33.113 Nov 7 07:26:20 meumeu sshd[9552]: Failed password for invalid user www from 138.197.33.113 port 32856 ssh2 Nov 7 07:30:53 meumeu sshd[10061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.33.113 ...	2019-11-07 14:54:11
35.155.227.129	attackspam	C2,WP GET /wp-login.php	2019-11-07 14:56:28
147.75.199.49	attack	2019-11-07T06:55:54.562691abusebot.cloudsearch.cf sshd\[24015\]: Invalid user niubi123a from 147.75.199.49 port 34458	2019-11-07 14:59:32
68.183.42.105	attackspam	Nov 7 08:05:35 mintao sshd\[15879\]: Invalid user 62.233.104.75 - SSH-2.0-Ope.SSH_7.4\\r from 68.183.42.105\ Nov 7 08:13:13 mintao sshd\[15896\]: Invalid user 64.207.190.99 - SSH-2.0-Ope.SSH_5.3\\r from 68.183.42.105\	2019-11-07 15:19:17
193.32.160.152	attackspambots	Nov 7 07:30:35 relay postfix/smtpd\[2917\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\> Nov 7 07:30:35 relay postfix/smtpd\[2917\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\> Nov 7 07:30:35 relay postfix/smtpd\[2917\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\> Nov 7 07:30:35 relay postfix/smtpd\[2917\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.152\]: 554 5.7.1 \: Relay access de ...	2019-11-07 14:51:15
95.216.246.231	attackspambots	11/07/2019-01:41:21.896702 95.216.246.231 Protocol: 6 ET SCAN Potential SSH Scan	2019-11-07 14:41:32
184.154.189.90	attackspambots	Automatic report - Banned IP Access	2019-11-07 14:47:03
106.13.98.183	attackspambots	Bad crawling causing excessive 404 errors	2019-11-07 14:28:32
198.27.116.229	attack	Oct 30 02:43:44 microserver sshd[56169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.116.229 user=root Oct 30 02:43:46 microserver sshd[56169]: Failed password for root from 198.27.116.229 port 36578 ssh2 Oct 30 02:49:45 microserver sshd[56875]: Invalid user dns from 198.27.116.229 port 51304 Oct 30 02:49:45 microserver sshd[56875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.116.229 Oct 30 02:49:47 microserver sshd[56875]: Failed password for invalid user dns from 198.27.116.229 port 51304 ssh2 Oct 30 03:01:34 microserver sshd[58702]: Invalid user minecraft123minecraft from 198.27.116.229 port 52458 Oct 30 03:01:34 microserver sshd[58702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.116.229 Oct 30 03:01:35 microserver sshd[58702]: Failed password for invalid user minecraft123minecraft from 198.27.116.229 port 52458 ssh2 Oct 30 03:07:32 microserver sshd[5943	2019-11-07 14:50:54
181.49.117.130	attackspam	Nov 6 20:25:51 php1 sshd\[29672\]: Invalid user ibm from 181.49.117.130 Nov 6 20:25:51 php1 sshd\[29672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.117.130 Nov 6 20:25:53 php1 sshd\[29672\]: Failed password for invalid user ibm from 181.49.117.130 port 30577 ssh2 Nov 6 20:30:01 php1 sshd\[30081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.117.130 user=root Nov 6 20:30:03 php1 sshd\[30081\]: Failed password for root from 181.49.117.130 port 1210 ssh2	2019-11-07 15:08:29
139.162.122.199	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-07 14:29:02
201.55.126.57	attackspambots	2019-11-07T01:25:00.650430ns547587 sshd\[20659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.55.126.57 user=root 2019-11-07T01:25:03.351951ns547587 sshd\[20659\]: Failed password for root from 201.55.126.57 port 58671 ssh2 2019-11-07T01:31:02.720620ns547587 sshd\[32679\]: Invalid user mk from 201.55.126.57 port 49646 2019-11-07T01:31:02.722639ns547587 sshd\[32679\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.55.126.57 ...	2019-11-07 14:46:02

最近上报的IP列表

125.160.65.249	102.190.85.82	217.75.222.138	82.78.202.113
78.163.217.4	43.254.48.52	35.225.24.93	113.160.148.233
113.181.2.103	45.87.221.110	181.111.56.165	112.199.123.13
1.165.111.179	183.14.248.115	182.61.190.142	122.237.157.243
61.191.56.231	37.129.69.153	49.37.132.235	32.63.90.164